The idea is that it'd be illegal to do so. Same as how with GDPR it's illegal to track users who denied tracking, even though the "don't track me" setting is a cookie and nothing technical stops them from doing fingerprinting.